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We Claim: f 

A method facilitated by a computer network to accomplish a trust^fi transaction 
etween a business entity and a networked consumer, comprising tlwacts of: 

providing an administrative server having a communications channel for 
electronically communicating with the business entity and havi^ a communications 
channel for electronically communicating with a netwprked entity and the 
networked consumer; g 

providing a business registration system in the administrative server wherein 
the business entity can be authenticated and a unique identifier is assigned to the 
business entity (BEID), whereby the business entity is designated a registered 
business entity; I 

allowing the registered business IzxtixXy to selectively access the 
administrative server to submit details of gfroducts and/or services provided by the 
registered business entity and to view selections made by the networked consumer 
wherein the administrative server willfstore the details of products and/or services 
provided by the registered business ^ntity; 

providing a networked entity registration system in the administrative server 
wherein the networked entity c^i be authenticated, whereby the networked entity is 
designated a registered netwdrked entity; and 

providing a nelwopced consumer registration system in the administrative 
server whereby a netwojrked consumer who has authorized access to a registered 
networked entity's sydem can be designated a registered consumer and assigned a 
unique registered ccmsumer identifier (RCID), and whereby a registered consumer 
with a valid ROW will be allowed access to data provided by a registered business 
entity and to make selections on the data, the selections being stored in the 
administrative server. 
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2. The method as recited in Claim 1 wherein the registeredf consumer has 
authorized access to the registered networked entity's system thrcjjagh the registered 
networked entity's intra-network system. 

5 3. The method as recited in Claim 1 wherein the registered consumer has 
authorized access to the registered networked entity's system through an Internet 
system. 

.4. The method as recited in Claim 1 further comprising the act of providing an 
10 on-line payment system where a registered consumer can make payments to a 
business entity for goods and/or services select^ by the registered consumer. 

5. The method as recited in Claim l^vherein the communications channels 
employ a secure socket layer protocol. 



15 



6. The method as recited in Clayai 1 wherein the identifiers comprise an e-mail 
address and a password. 




7. The method as recited/in Claim 6 wherein a process for designating a 
2 0 business entity as a registere^ousiness entity, comprising the acts of: 

receiving registration information from the business entity including an e- 
mail address of a contact person for the business entity; 
authenticating the business entity; 
assigning a password to the business entity; and 
2 5 electronically sending the password to the received e-mail address. 



8. The method as recited in Claim 6 wherein a process for designating a 
networked entity as a registered networked entity, comprising the acts of: 

receiwng registration information from the networked entity including an e- 
3 0 mail address of a contact person for the networked entity; 
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authenticating the networked entity; 

assigning a password forfthe networked entity; and 

electronically sending the password to the received e-mail address. 



10 



9. The method as recited! in Claim 6 wherein a process for designating a 
networked consumer as a registered consumer comprises the acts of: 

receiving registration information from the networked consumer including 
an e-mail address of the networked consumer; 

authenticating the registered networked entity; 

assigning a password tp the networked consumer; and 

electronically sendingllhe password to the received e-mail address. 



10. The method as ifecited in Claim 1 wherein the authentication is 
accomplished by exchanging|digital certificates. 

15 

11. The method as rlcited in Claim 1 further comprising the act of 
authenticating the registered networked entity prior to designating the networked 
consumer as a registered consumer. 

I 

2 0 12. The method as recated in Claim 4 wherein the identifier comprises an e-mail 
address and a password. 
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13. The method as recited in Claim 12 wherein a process for designating a 

jj 

business entity as a registered business entity, comprising the acts of: 

receiving registration information from the business entity including an e- 

mail address of a contact person for the business entity; 
authenticating tne business entity; 
assigning a password to the business entity; and 
electronically sending the password to the received e-mail address. 
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14. The method as recited in Claim 12 wherein a process for designating a 
networked entity as a registered networked entity, comprisingine acts of: 

receiving registration information from the networked entity including an e- 
mail address of a contact person for the networked entity^ 
5 authenticating the networked entity; 

assigning a password for the networked entity^&nd 
electronically sending the password to the received e-mail address. 

15. The method as recited in Claim 12 wherein a process for designating a 
1 0 networked consumer as a registered consumei&omprises the acts of: 

receiving registration information from the networked consumer including 
an e-mail address of the networked consigner; 

authenticating the registered networked; 
assigning a password to the networked consumer; and 
15 electronically sending the nassword to the received e-mail address. 

16. A method facilitated by ax&mputer network to accomplish a trusted transaction 
of a group benefits plan involving a business entity, a networked entity, and a 
networked consumer, comprising the acts of: 

2 0 providing an administrative server having a communications channel for 

electronically communicating with the business entity and having a communications 
channel for electronically communicating with the networked entity and networked 
consumer; 

providing^ business registration system in the administrative server wherein 
25 the business entity can be authenticated and a unique identifier is assigned to the 
business ent^jy (BEID), whereby the business entity is designated a registered 
business entity; 

allowing the registered business entity to selectively access the 
administrative server to submit details of group benefits plans provided by the 

3 0 registered business entity and to view selections made by the networked consumer 
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wherein the administrative server will store the details of the group benefited plans 
provided by the registered business entity; / 

providing a networked entity registration system in the administrative server 
wherein the networked entity can be authenticated and a uniqu^r identifier is 
5 assigned to the networked entity (NEID), whereby the networked entity is 
designated a registered networked entity; I 

allowing the registered networked entity to selectivelv^iccess the details of 
the group benefits plans provided by a registered business eptity and to endorse the 
group benefits plans wherein the administrative server wiljr store the group benefits 
1 0 plans endorsed by the networked entity; and / 

providing a networked consumer registration/system in the administrative 
server whereby a networked consumer who has authorized access to a registered 
networked entity's system can be designated a registered consumer and assigned a 
unique registered consumer identifier (RCID)f and whereby a registered consumer 
15 with a valid RCDD will be allowed access terthe endorsed group benefits plans and 
will be allowed to make selections on the ^ndorsed group benefits plans. 

17. The method as recited in CMim 16 wherein the registered consumer has 
authorized access to the registeredJietworked entity's system through the registered 

2 0 networked entity* s intra-network^stem. 

18. The method as recited in Claim 16 wherein the registered consumer has 
authorized access to the i/egistered networked entity's system through an Internet 
system. / 

25 / 

19. The method as recited in Claim 16 further comprising the act of providing an 
on-line payment sjretem where a registered networked entity can make payments to a 
business entity mr group benefits plans selected by a registered consumer. 
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20. The method as recited in Claim 16 wherein the communications ch£ 
employ a secure socket layer protocol. 

21. The method as recited in Claim 16 wherein the identifiers con^rise an e- 
5 mail address and a password. 



10 



22. The method as recited in Claim 21 wherein a process/for designating a 
business entity as a registered business entity comprising the actfs of: 

receiving registration information from the businesgfentity including an e- 
mail address of a contact person for the business entity; 
authenticating the business entity; 
assigning a password to the business entity; 

electronically sending the password to the received e-mail address. 
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23. The method as recited in Claim 21 wherein a process for designating a 
networked entity as a registered networked entity comprising the acts of: 

receiving registration information from the networked entity including an e- 
mail address of a contact person for the iietworked entity; 
authenticating the networked entity; 
assigning a password to the ifetworked entity; and 
electronically sending the>password to the received e-mail address. 

24. The method as recited in Claim 21 wherein a process for designating a 
networked consumer as a registered consumer comprises the acts of: 

receiving registration information from the networked consumer including 
an e-mail address of theinetworked consumer; 

authenticating/he registered networked entity; 
assigning a password to the networked consumer; and 
electronically sending the password to the received e-mail address. 
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25. The method as reciteft in Claim 16 wherein the authentication is 
accomplished by exchanging digital certificates. 

26. The method as recited in Claim 16 further comprising the act of 
authenticating the registered networked entity prior to designating the networked 
consumer as a registered consumer. 

27. The method as recitgd in Claim 19 wherein the identifier comprises an e- 
mail address and a password 

28. The method as rdpited in Claim 27 wherein a process for designating a 

business entity as a registered business entity comprising the acts of: 

I 

receiving registration information from the business entity including an e- 
mail address of a contacjperson for the business entity; 
1 5 authenticating tm business entity; 

assigning a password to the business entity; and 

electronically sending the password to the received e-mail address. 

29. The method as recited in Claim 27 wherein a process for designating a 
2 0 networked entity as ^registered networked entity comprising the acts of: 

receiving registration information from the networked entity including an e- 
mail address of a contact person for the networked entity; 
authenticating the networked entity; 
assigning aroassword to the networked entity; and 
2 5 electronically sending the password to the received e-mail address. 



30. The metl|bd as recited in Claim 27 wherein a process for designating a 
networked consigner as a registered consumer comprises the acts of: 

receiving registration information from the networked consumer including 
3 0 an e-mail address of the networked consumer; 
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authenticating the registered iretworked entity; 
assigning a password to the networked consumer; and 
electronically sending the password to the received e-mail address. 

31. An administrative servew apparatus for facilitating a trusted transaction 
between a business entity and a networked consumer comprising: 

a communication mechanism for allowing the administrative server to 
electronically communicate With the business entity and a communication 
mechanism for allowing the aaministrative server to electronically communicate 
with a networked entity and thepetworked consumer; 

a business registrationfi mechanism wherein the business entity can be 
authenticated and a unique identifier is assigned to the business entity (BEED), 
whereby the business entity is designated a registered business entity; 

a mechanism for allowing the registered business entity to selectively access 
the administrative server to submit details of products and/or services provided by 
the registered business entity and to view selections made by the networked 
consumer, and a storage device for storing the details of products and/or services 
provided by the registered business entity; 

a networked entity registration mechanism wherein the networked entity can 
be authenticated, whereby thf networked entity is designated a registered networked 
entity; and 

a networked consigner registration mechanism whereby a networked 
consumer having authorized access to a registered networked entity's system can be 
designated a registered consumer and assigned a unique registered consumer 
identifier (RCID), and wh^eby a registered consumer with a valid RCID will be 
allowed access to data prowded by a registered business entity and make selections 
on the data, the selections feeing stored in the storage device of the administrative 
server apparatus. I 
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32. The apparatus as recited in Claim 31 wherein the registered consumer has 
authorized access to the registered networked entity's system through Jtfe registered 
networked entity's intra-network system. 

5 33. The apparatus as recited in Claim 31 wherein the registered consumer has 
authorized access to the registered networked entity's sys^m through an Internet 
system. 

34. The apparatus as recited in Claim 31 further iTomprising an on-line payment 
1 0 mechanism where a registered consumer can makg^payments to a business entity for 
goods and/or services selected by the registered Consumer. 



15 



20 



25 



35. The apparatus as recited in Cl^im 31 wherein the communications 
meichanisms employ a secure socket layef protocol. 

36. : The apparatus as recited in^Claim 31 wherein the identifiers comprise an e- 
mail address and a password. 

37. The apparatus as rgeited in Claim 36 wherein the business entity registration 
mechanism comprises: 

a mechanisnwbr receiving registration information from the business entity 
including an e-mail/address of a contact person for the business entity; 
a mechanism for authenticating the business entity; 
a mechanism for assigning a password to the business entity; and 
a melanism for electronically sending the password to the received e-mail 
address. 



38. /The apparatus as recited in Claim 36 wherein the networked entity 
registration mechanism comprises: 
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a mechanism for receiving registration information from the netwojKed 
entity including an e-mail address of a contact person for the networked entity 

a mechanism for authenticating the networked entity; 

a mechanism for assigning a password to the networked entity; 

a mechanism for electronically sending the password to the rgjfeived e-mail 
address. 

39. The apparatus as recited in Claim 36 wherein the jCetworked consumer 
registration mechanism comprises: 

a mechanism for receiving registration information from the networked 
consumer including an e-mail address of the networked^onsumer; 

a mechanism for authenticating the registered^ietworked entity; 

a mechanism for assigning a password to the networked consumer; and 

a mechanism for electronically sending Jfte password to the received e-mail 
address. 

40. The apparatus as recited in iflaim 31 wherein the authentication is 
accomplished by exchanging digital certificates. 



41. The apparatus as recited uf Claim 31 further comprising a mechanism for 
authenticating the registered netwc 
consumer as a registered consumer. 



authenticating the registered networked entity prior to designating the networked 

sume 
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42. The apparatus as recited in Claim 34 wherein the identifiers comprise an e- 
mail address and a password. 



passwc 

/ 



43. The apparatus as recited in Claim 42 wherein the business entity registration 
mechanism comprises: 

a mechanism for receiving registration information from the business entity 
including amp-mail address of a contact person for the business entity; 
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a mechanism for authenticating thi business entity; 

a mechanism for assigning a password to the business entity; and 

a mechanism for electronically sending the password to the received e-mail 



address. 
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44. The apparatus as recited in /Claim 42 wherein the networked entity 
registration mechanism comprises: 

a mechanism for receiving iSbgistration information from the networked 
entity including an e-mail address of a contact person for the networked entity; 

a mechanism for authenticating the networked entity; 

a mechanism for assigning affpassword for the networked entity; and 

a mechanism for electronically sending the password to the received e-mail 
address. 



15 




45. The apparatus as recited in Claim 42 wherein the networked consumer 
registration mechanism composes: 

a mechanism for receiving registration information from the networked 
consumer including an e-mail address of the networked consumer; 

a mechanism for aimienticating the registered networked entity; 

a mechanism for assigning a password to the networked consumer; and 

a mechanism for Electronically sending the password to the received e-mail 
address. 



46. A system undpr the control of a business entity facilitating a trusted 
2 5 transaction with a networked consumer, the system comprising: 
a business entaty server; 

an electronic^ communicating mechanism for providing the business entity 
server access to a s^ver-to-server electronic communication channel; 
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an authenticating system coupled to said business entity server for 
facilitating an authentication process of the business entity when^aid networked 
entity server is accessing the electronic communication channel; and 

a mechanism for outputting registration information ^herein the ouputting 
5 of the registration information initiates the authentication ^process of the business 
entity, and for receiving a business, entity identifier, whe^n outputting the business 
entity identifier allows details of products and/or services to be outputted to the 
electronic communication channel and further alloWs selections of products and/or 
services made by the networked consumer to Joe received from the electronic 
1 0 communication channel. 

47. The system as recited in Claim/46 wherein the authenticating system 
employs a digital certificate authenticating protocol. 

15 48. The system as recited in Qaim 46 wherein the electronic communication 

.„ 

49. The system as recitednn Claim 46 wherein the business entity identifier is an 
e-mail address of a contact^person for the business entity and a password. 



50. The system agfrecited in Claim 46 wherein the networked consumer has 
authorized access to^Ci intra-network system of a networked entity. 



51. The system as recited in Claim 50 wherein the authenticating system 
2 5 employs a digital certificate authenticating protocol. 
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52. TMe system as recited in Claim 50 wherein the electronic communication 
mechanism employs the secure socket layer protocol. 
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53. The system as recited in Claim 50 wherein the business entity identifier is an 
e-mail address of a contact person for the business entity and a password. 

54. A system under the control of a networked entity facilitating a trusted 
5 transaction between a business entity and a networked congraier, the system 

comprising: 

a networked entity server; 

a system for facilitating an electronic connectioij/bf the networked entity 
server to a PC via a network system; 

0 a communication mechanism for providing ngtworked entity server access to 

a server-to-server electronic communication cha 

an authenticating system coupled to/the networked entity server for 
facilitating an authentication process of the jietworked entity when the networked 
entity server is accessing the electronic conmiunication channel; 

5 a mechanism for outputting networked entity registration information and 

for receiving a networked entity identifier, wherein the outputting of the networked 
entity registration information initiates the authentication process; and 

a mechanism for allowing the PC to access the electronic communication 
channel to output networkpd consumer registration information wherein the 

0 outputting of the networOced consumer registration information initiates the 
authentication process oinhe networked entity, and for allowing the PC to receive a 
registered consumer identifier wherein an outputting of the registered consumer 



identifier allows therPC to receive details of products and/or services and to make 
selections on the products and/or services. 

/ 

55. The system as recited in Claim 54 wherein the network system is an intra- 
network system. 

56. 'Jhe method as recited in Claim 54 wherein the network system is an Internet 
syster 
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57. The system as recited in Claim 54 wherein said authenticating system 
employs the digital certificate authenticating protocol. 

5 58. The system as recited in Claim 54 wherein the^Smmunicating mechanism 
employs the secure socket layer protocol. 

59. The system as recited in Claim 55ywherein the intra-network system is a 
local area network system. 

10 

60. The system as recited in^&laim 55 wherein the intra-network system is a 
wide area network system. 

^ 61. The system a^ecited in Claim 54 wherein an authorized access requires 
1 5 submission of a proper login ID and password. 



62. Th^system as recited in Claim 54 wherein the identifiers comprise an e-mail 
address^nd password. 
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